---
id: CVE-2023-53598
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  bus: mhi: host: Range check CHDBOFF and ERDBOFF

  If the value read from the CHDBOFF and ERDBOFF registers is outside the
  range of the MHI register space then an invalid…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  bus: mhi: host: Range check CHDBOFF and ERDBOFF

  If the value read from the CHDBOFF and ERDBOFF registers is outside the
  range of the MHI register space then an invalid…
severity: high
cvss: 8.4
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 5.7, < 5.10.192'
  - 'linux_kernel >= 5.11, < 5.15.112'
  - 'linux_kernel >= 5.16, < 6.1.28'
  - 'linux_kernel >= 6.2, < 6.2.15'
  - 'linux_kernel >= 6.3, < 6.3.2'
patched:
  - linux_kernel 6.3.2
published: '2025-10-04'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T22:17:43.727'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2023-53598'
references:
  - url: 'https://git.kernel.org/stable/c/2343385fe6eed11d0432ab42a97b3ca4aef06a99'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/372f1752b74572b0a9d2288841eab7db17daccae'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/4e584127ec2bd42a37c88badb49df409f21fa40a'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/6a0c637bfee69a74c104468544d9f2a6579626d0'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/83bf6b87e2dd053d95d89eb2f01ae885f9e568db'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/a2cbb1a45a0c86ce77839c0875414efe1a89315e'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.00162
epssPercentile: 0.05289
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-15T21:35:47.586374Z'
ingestedAt: '2026-10-15T22:48:25.409Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

bus: mhi: host: Range check CHDBOFF and ERDBOFF

If the value read from the CHDBOFF and ERDBOFF registers is outside the
range of the MHI register space then an invalid address might be computed
which later causes a kernel panic.  Range check the read value to prevent
a crash due to bad data from the device.

## Affected

- `linux_kernel >= 5.7, < 5.10.192`
- `linux_kernel >= 5.11, < 5.15.112`
- `linux_kernel >= 5.16, < 6.1.28`
- `linux_kernel >= 6.2, < 6.2.15`
- `linux_kernel >= 6.3, < 6.3.2`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.3.2`